NVD

Id
58943  
Name
CVE-2006-0203  
Description
membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-01-13  
Modified Date
2011-10-03  
Seq
2006-0203  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
302663 58943 CVE-2006-0203 20060129 [xpl#2] MiniNuke 1.8.2 - change member"s passwrod < Perl >  View
302664 58943 CVE-2006-0203 20060112 Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit  View
302665 58943 CVE-2006-0203 20060112 Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability  View
302666 58943 CVE-2006-0203 344  View
302667 58943 CVE-2006-0203 20060113 Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remoteuser password change exploit  View
302668 58943 CVE-2006-0203 ADV-2006-0173  View
302669 58943 CVE-2006-0203 mininuke-membership-change-password(24101)  View

Related JVN